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Disclosure of Substance Use Disorder Patient Records: 
How Do !| Exchange Part 2 Data? 


Title 42 of the Code of Federal Regulations (CFR) Part 2: Confidentiality of Substance Use Disorder 
Patient Records (Part 2) was first promulgated in 1975 to address concerns about the potential use of 
Substance Use Disorder (SUD) information in non-treatment based settings such as administrative or 
criminal hearings related to the patient. Part 2 is intended to ensure that a patient receiving treatment 
for a SUD in a Part 2 Program does not face adverse consequences in relation to issues such as criminal 
proceedings and domestic proceedings such as those related to child custody, divorce or employment. 
Part 2 protects the confidentiality of SUD patient records by restricting the circumstances under which 
Part 2 Programs or other lawful holders’ can disclose such records. 





Part 2 Programs are federally assisted’ programs.’ In general, Part 2 Programs are prohibited from 
disclosing any information that would identify a person as having or having had a SUD unless that 
person provides written consent. Part 2 specifies a set of requirements for consent forms, including but 
not limited to the name of the patient, the names of individuals/entities that are permitted to disclose 
or receive patient identifying information, the amount and kind of the information being disclosed, and 
the purpose of the disclosure (see §2.31)." In addition to Part 2, other privacy laws such as the Health 


Insurance Portability and Accountability Act of 1996 (HIPAA)°> have been enacted. HIPAA generally 
permits the disclosure of protected health information for certain purposes without patient 
authorization, including treatment, payment, or health care operations. 


To help stakeholders understand their rights and obligations under Part 2, the Office of the National 


Coordinator for Health Information Technology (ONC) and the Substance Abuse and Mental Health 
Services Administration (SAMHSA) have released two fact sheets illustrating how Part 2 might apply in 
various settings. This fact sheet demonstrates how Part 2 applies to the electronic exchange of health 


* A “lawful holder” is an individual or entity who has received patient identifying information as the result of a part 
2-compliant consent or as otherwise permitted under the part 2 statute, regulations, or guidance. 

: “Federally assisted” (defined at § 2.12 (b)) encompasses a broad set of activities, including management by a 
federal office or agency, receipt of any federal funding, or registration to dispense controlled substances related to 
the treatment of SUDs. Many SUD treatment programs are federally assisted. 

A “orogram” (defined at § 2.11) is an individual, entity (other than a general medical facility), or an identified unit 
in a general medical facility, that “holds itself out” as providing and provides diagnosis, treatment, or referral for 
treatment for a SUD. Medical personnel or other staff in a general medical facility who are identified as providers 
whose primary function is to provide diagnosis, treatment, or referral for treatment for a SUD are also Programs. 
“Holds itself out” means any activity that would lead one to reasonably conclude that the individual or entity 
provides substance use disorder diagnosis, treatment, or referral for treatment. 

* A full description of the requirements of a Part 2 consent form is available at: 
https://www.gpo.gov/fdsys/pkg/FR-2017-01-18/pdf/2017-00719.pdf. 

> State laws and regulations may also further restrict the disclosure of substance use disorder patient records. 

The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 


is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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care records with a Part 2 Program. The fact sheet presents health information exchange scenarios and 
illustrates how Part 2 applies to a theoretical disclosure of patient health information in each scenario.° 


HEALTH INFORMATION EXCHANGE 


Electronic health information exchange allows doctors, nurses, pharmacists, other health care providers, 
and patients to appropriately access and securely share an individual’s health information—improving 
the speed, quality, safety, and cost of patient care. Health information exchange can greatly improve the 
completeness of patient records, which in turn contributes to more informed decision-making at the 
point of care. Two common types of health information exchange include directed exchange and query- 
based exchange. 


DIRECTED EXCHANGE 


Directed exchange enables health care providers to securely send/receive patient information—such as 
laboratory orders and results, patient referrals, or discharge summaries— via the internet to/from a 
known and trusted recipient. Common forms of directed exchange include Direct Secure Messaging 
(commonly compared to secure email for healthcare), point-to-point interfaces between systems, and 
web services. 
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In the directed exchange scenario, Dr. Washington is an addiction counselor at Memorial Treatment 
Center, a SAMHSA-certified Opioid Treatment Program that provides medication-assisted treatment 
(MAT) for persons diagnosed with an opioid use disorder. One of Dr. Washington’s patients is Thomas. 


° Note: All scenarios described in this fact sheet involve adult patients. Part 2 includes specific provisions for minor 

patients (see § 2.14) that are not presented in this fact sheet. 

The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 
is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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Thomas was recently referred to Memorial Treatment Center by his primary care provider, Dr. Adams. 
After entering Memorial’s treatment program, Thomas noted that he wants Dr. Adams to know about 
his treatment at Memorial Treatment Center. 


To meet the requirements of Part 2, Dr. Washington has Thomas complete a consent form specifying 
that he would like progress notes related to his treatment for SUD sent from Memorial Treatment 
Center to Dr. Adams. After each appointment, Dr. Washington uses his electronic health record (EHR) 
system to create a direct message and send the progress notes to Dr. Adams, who receives the message 
in her EHR system. 


QUERY-BASED EXCHANGE 


Query-based exchange enables health care providers to search clinical data sources and discover 
information about a patient. Query-based exchange typically involves an intermediary, often known as a 
health information exchange (HIE). The HIE either maintains a centralized data repository that includes 
data from connected systems, or facilitates requests from one system to search another system. 


In the query-based exchange scenario, Monument Community Mental Health Center (Monument) 
provides a variety of behavioral health services to patients, including treatment for SUDs. Monument 
describes these services on its website and through advertisements. Dr. Madison is a psychiatrist at 
Monument who specializes in addiction treatment and counseling and provides MAT to patients with a 
SUD. Monument recently joined a local HIE and wants to share patient records with the HIE so that 
other providers can access information about the behavioral health care of their patients. 


As a Part 2 Program, Monument would need to meet the requirements of Part 2 before disclosing 
patient records to the HIE. To meet the requirements of Part 2, Monument must either obtain patient 
consent before disclosing Part 2 patient-identifying information to the HIE or execute a Qualified Service 
Organization Agreement (QSOA) with the HIE (see § 2.11 and § 2.12(c)(4)). 


Query-Based Exchange Scenario 1: Written QSOA with an HIE 


A qualified service organization is an individual or entity who: 


(1) Provides services to a Part 2 Program, such as data processing, bill collecting, dosage 
preparation, laboratory analyses, legal, accounting, population health management, medical 
staffing, or other professional services, and 


(2) Has entered into a written agreement with a Part 2 Program under which the QSO: 


(i) Acknowledges that in receiving, storing, processing, or otherwise dealing with any patient 
records from the Part 2 Program, it is fully bound by 42 CFR Part 2; and 


(ii) If necessary, will resist in judicial proceedings any efforts to obtain access to patient- 
identifying information related to substance use disorder diagnosis, treatment, or 
referral for treatment except as permitted by 42 CFR Part 2. 


The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 
is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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Monument and the HIE could sign a QSOA acknowledging that the HIE is providing information exchange 
services to Monument and is bound by the requirements of Part 2. Because the HIE is considered a QSO, 
Part 2 Programs at Monument would not need patient consent to disclose patient information to the 
HIE. However, providers participating in the HIE would need Thomas’s consent to view his SUD patient 
records. The HIE would be restricted from re-disclosing patient identifying information to participating 


providers without Thomas’s consent. 
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In the figure above, Thomas grants consent for Dr. Madison to share his SUD records with Dr. Monroe, a 
provider participating in a local HIE. Dr. Madison can send Thomas’s records to the HIE without his 
consent because the HIE has a QSOA with Monument. Dr. Monroe can access Thomas’s SUD records 
through the HIE because he was named on Thomas’s consent form. However, other providers 
participating in the HIE could not access Thomas’s records because they were not listed on the consent 
form. 


Query-Based Exchange Scenario 2: Patient Consent Forms 


lf Monument and the HIE did not sign a QSOA, Dr. Madison could have her patients fill out a consent 
form to disclose their SUD treatment records to other health care providers through the HIE. Health care 
providers listed on the patient’s consent form could access the HIE to view the patient’s records. The 
consent form would need to include the name of the HIE, as well as the (1) name of a specific individual 
and/or organization participating in the HIE, or (2) a general designation of individuals/entities that have 
a treating provider relationship with the patient. The consent form would also have to fulfill all other 
requirements as specified by Part 2. 


The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 
is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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lf a patient used a general designation, the consent form would also have to include a notice stating that 
the patient understands that upon written request, he/she must be provided with a list of entities to 
which his/her information has been disclosed within the past two years. The HIE would be responsible 
for responding to the request within 30 days. For each disclosure, the HIE would have to include the 
name(s) of the entities to which the disclosure was made, the date of the disclosure, and a brief 
description of the patient-identifying information that was disclosed. 


Additional Resources 


e 42 CFR Part 2 [PDF - 556 KB] 
e SAMHSA’s webpage about 42 CFR Part 2 


The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 
is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 


contained herein. 
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Disclosure of Substance Use Disorder Patient Records: 
Does Part 2 Apply to Me? 


Title 42 of the Code of Federal Regulations (CFR) Part 2: Confidentiality of Substance Use Disorder 
Patient Records (Part 2) was first promulgated in 1975 to address concerns about the potential use of 
Substance Use Disorder (SUD) information in non-treatment based settings such as administrative or 
criminal hearings related to the patient. Part 2 is intended to ensure that a patient receiving treatment 
for a SUD in a Part 2 Program does not face adverse consequences in relation to issues such as criminal 
proceedings and domestic proceedings such as those related to child custody, divorce or employment. 
Part 2 protects the confidentiality of SUD patient records by restricting the circumstances under which 
Part 2 Programs or other lawful holders’ can disclose such records. 





Part 2 Programs are federally assisted’ programs.* In general, Part 2 Programs are prohibited from 
disclosing any information that would identify a person as having or having had a SUD unless that 
person provides written consent. Part 2 specifies a set of requirements for consent forms, including but 
not limited to the name of the patient, the names of individuals/entities that are permitted to disclose 
or receive patient identifying information, the amount and kind of the information being disclosed, and 
the purpose of the disclosure (see §2.31)." In addition to Part 2, other privacy laws such as the Health 


Insurance Portability and Accountability Act of 1996 (HIPAA) have been enacted. HIPAA generally 
permits the disclosure of protected health information for certain purposes without patient 
authorization, including treatment, payment, or health care operations. 


To help stakeholders understand their rights and obligations under Part 2, the Office of the National 


Coordinator for Health Information Technology (ONC) and the Substance Abuse and Mental Health 
Services Administration (SAMHSA) have released two fact sheets illustrating how Part 2 might apply in 
various settings. This fact sheet focuses on helping health care providers determine how Part 2 applies 
to them by depicting scenarios they might encounter when caring for patients. Each scenario illustrates 


* A “lawful holder” is an individual or entity who has received patient identifying information as the result of a part 
2-compliant consent or as otherwise permitted under the part 2 statute, regulations, or guidance. 

: “Federally assisted” (defined at § 2.12 (b)) encompasses a broad set of activities, including management by a 
federal office or agency, receipt of any federal funding, or registration to dispense controlled substances related to 
the treatment of SUDs. Many SUD treatment programs are federally assisted. 

A “orogram” (defined at § 2.11) is an individual, entity (other than a general medical facility), or an identified unit 
in a general medical facility, that “holds itself out” as providing and provides diagnosis, treatment, or referral for 
treatment for a SUD. Medical personnel or other staff in a general medical facility who are identified as providers 
whose primary function is to provide diagnosis, treatment, or referral for treatment for a SUD are also Programs. 
“Holds itself out” means any activity that would lead one to reasonably conclude that the individual or entity 
provides substance use disorder diagnosis, treatment, or referral for treatment. 

* A full description of the requirements of a Part 2 consent form is available at: 
https://www.gpo.gov/fdsys/pkg/FR-2017-01-18/pdf/2017-00719.pdf. 

> State laws and regulations may also further restrict the disclosure of substance use disorder patient records. 

The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 


is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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whether Part 2 applies to a theoretical disclosure of patient health information, and if so, what a 
provider would need to do to properly disclose the information according to Part 2.° 


SCENARIO 1: OPIOID TREATMENT PROGRAM 
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ABC Treatment Center (ABC) is a SAMHSA-certified Opioid Treatment Program that provides 
Medication-Assisted Treatment (MAT) for persons diagnosed with an opioid use disorder (OUD). ABC is 
accredited by a SAMHSA-approved accrediting body to dispense opioid treatment medications. Dr. Van 
Buren works at ABC and is registered with the Drug Enforcement Administration (DEA) to prescribe 
controlled substances for the treatment of OUD. 


Charlie is a 33-year-old who hurt his back at work. He went to his primary care provider, Dr. Harrison, 
and was prescribed an opioid painkiller to manage his pain. Charlie became dependent on the painkiller 
and began illegally obtaining and using opioids after his prescription ran out. Charlie sought help from 
ABC and is now receiving methadone treatment for an OUD. 


Charlie is seeing Dr. Harrison in two weeks to follow up about his back injury. Dr. Van Buren asked 
Charlie if he wanted his treatment information sent to his primary care provider, Dr. Harrison. Charlie 
agreed in a written consent to let Dr. Van Buren share his OUD treatment information with Dr. Harrison. 


° Note: All scenarios described in this fact sheet involve adult patients. Part 2 includes specific provisions for minor 
patients (see § 2.14) that are not presented in this fact sheet. 

The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 
is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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e Step 1-—Is ABC covered? Does Part 2 apply? 
Yes. ABC meets the definition of a program because it is an entity (other than a general medical 
facility) that holds itself out (e.g. through advertisements) as providing and provides SUD 
treatment services. Additionally, ABC is federally assisted because it has been certified by 
SAMHSA as an Opioid Treatment Program. Therefore, ABC meets the definition of a Part 2 
Program. 


e Step 2—Can ABC disclose patient-identifying information? If so, how? 
Yes. As a Part 2 Program, ABC can disclose patient-identifying information if it obtains written 
patient consent. Because ABC Treatment Center holds itself out as a facility that provides SUD 
diagnosis, treatment, or referral for treatment, any patient information coming from ABC could 
identify the patient as having or having had a SUD. 


To share Charlie’s record with Charlie’s primary care provider, Dr. Van Buren would need to 
obtain written consent from Charlie. The consent form would need to comply with all of the 
requirements specified in §2.31 of the Part 2 regulations, including identifying the SUD 
information in the “Amount and Kind” section and stating the purpose of the disclosure. 
Charlie’s information would also need to be accompanied by a notice of prohibition on re- 
disclosure (described at §2.32) so that Dr. Harrison recognizes the information as Part 2- 
protected and does not further disclose the information without Charlie’s consent. See Figure 1, 
above, for an illustration. 


SCENARIO 2: MIXED-USE FACILITY 
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The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 
is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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Acme Community Mental Health Center (Acme) provides both SUD treatment services and mental 
health services. Acme recently installed an Electronic Health Record (EHR) system for the entire health 
center. 


Dr. Tyler, an addiction specialist at Acme, only treats patients with SUDs. Typically, Dr. Tyler uses 
controlled substances for detoxification or maintenance treatment of a patient’s SUD. 


Dr. Zachary, a psychiatrist at Acme, specializes in treating patients with mental disorders. Dr. Zachary 
does not treat patients for SUD. 


Brenda has bipolar disorder and a SUD. She has been going to Acme for the past five years and sees 
Dr. Zachary for treatment of her bipolar disorder and Dr. Tyler for treatment of her SUD. 


At Brenda’s most recent visit, Dr. Tyler added to Brenda’s record that Brenda was suffering from 
migraines and had relapsed in her recovery from her SUD. 


e Step 1-—Is Acme covered? Does Part 2 apply? 
Yes. Dr. Tyler meets the definition of a Part 2 Program because Dr. Tyler works at a general 
medical facility where her primary function is for the provision of diagnosis, treatment, or 
referral for treatment of patients with SUDs. Additionally, Dr. Tyler is considered federally 
assisted because she is registered with the DEA to prescribe controlled substances for 
detoxification or maintenance treatment of a SUD. Therefore, Dr. Tyler is considered a Part 2 
Program. 


e Step 2-—Can Acme disclose patient-identifying information? If so, how? 
This scenario is complex, with three types of health information to consider: SUD, migraines, 
and bipolar disorder. 


o SUD: Because Dr. Tyler meets the definition of a Part 2 Program, she needs to obtain 
Brenda’s consent to disclose information that would identify her as a patient with a 
SUD. This includes disclosures to other providers at Acme. Therefore, if Brenda’s SUD 
patient records are available to other providers at Acme through the facility’s EHR 
system, Brenda’s consent form must name Acme or individual providers at Acme if she 
wants to share her records with them (see Figure 2 for an illustration). The consent form 
would need to comply with all of the requirements specified in §2.31 of the Part 2 
regulations (i.e., identify the SUD information in the Amount and Kind section, identify 
the purpose of the disclosure, etc.). Brenda’s information would also need to be 
accompanied by a notice of prohibition on re-disclosure (described at §2.32). 


oO Migraines: In other circumstances, information about Brenda’s migraines would not 
identify her as a patient with a SUD and could potentially be disclosed without her 
consent. However, in this scenario, Dr. Tyler is a Part 2 Program. She only treats patients 
with a SUD and is recognized as such. Therefore, any information disclosed by Dr. Tyler 
would identify a patient as having or having had a SUD. Dr. Tyler would need to obtain 


The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 
is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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Brenda’s consent to disclose any personally identifying information related to her care, 
even if that information would not otherwise indicate that she had a SUD. 


© Bipolar disorder: Dr. Zachary does not meet the definition of a Part 2 Program and 
Brenda’s diagnosis of bipolar disorder would not identify her as a patient with a SUD. 
Therefore, Part 2 does not prohibit Dr. Zachary from disclosing information related to 
Brenda’s treatment for bipolar disorder without her consent; however, state laws may 
restrict the disclosure of mental health information without patient consent or 
authorization. 


Part 2 permits providers at Acme to acknowledge that Brenda is a patient at Acme without her 
consent. Because Acme is a mixed-use facility that provides services other than diagnosis, 
treatment, or referral for treatment for a SUD, acknowledging the presence of a patient at Acme 
would not necessarily identify that patient as having or having had a SUD. However, Acme 
providers could not disclose that Brenda is a patient of a Part 2 Program (e.g., that Brenda is a 
patient of Dr. Tyler) without her consent because that would identify her as having or having 
had a SUD. See figure 2, above, for an illustration. 


SCENARIO 3: ACCOUNTABLE CARE ORGANIZATION (ACO) 
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The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 
is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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Accountable care organizations (ACOs) and other value-based payment arrangements create incentives 
for health care providers to work together to deliver high quality, coordinated care for patients. ACOs 
are often composed of a variety of different providers and care settings. 


Safari ACO includes Lion Family Practice (Lions), Tiger Physicians Group (Tigers), Giraffe Hospital 
(Giraffes), and Bear Community Mental Health Center (Bears). Dr. Fillmore works at Bears, a mixed-use 
facility. She is recognized as the facility’s lead SUD physician and primarily treats patients with SUDs. Dr. 
Fillmore often prescribes controlled substances for detoxification or maintenance treatment to his 
patients, including Pat. 


e Step 1-—Is Dr. Fillmore covered? Does Part 2 apply? 
Yes. Dr. Fillmore meets the definition of a Part 2 Program because she is identified as a provider 
at a general medical facility whose primary function is to treat patients with SUDs. Additionally, 
Dr. Fillmore is considered federally assisted because she is registered with the DEA to prescribe 
controlled substances for detoxification or maintenance treatment of a SUD. Therefore, Dr. 
Fillmore meets the definition of a Part 2 Program. 


e Step 2 — Can Dr. Fillmore disclose patient-identifying information to Pat’s other providers in 
the ACO? If so, how? 
Dr. Fillmore would need to obtain written consent from Pat to disclose information about Pat’s 
treatment for a SUD to any other of her treating providers from Lions, Tigers, Giraffes, or Bears. 
The consent form would need to comply with all of the requirements specified in §2.31 of the 
Part 2 regulations (i.e., specifically identify the SUD information in the “Amount and Kind” 
section, identify the purpose of the disclosure, etc.). Pat’s information would also need to be 
accompanied by a notice of prohibition on re-disclosure (described at §2.32). Rather than 
naming each of her treating providers on the consent form, Pat could name Safari ACO and use 
a general designation (e.g. “all of my treating providers”). If Pat used a general designation, the 
consent form must include a statement indicating that, upon request, Pat is entitled to receive a 
list of all entities that have received her information under the general designation. See Figure 3, 
above, for an illustration. 


SCENARIO 4: INTEGRATED CARE SETTING 


Today, many patients receive treatment for a SUD in a primary care or integrated care setting. These 
settings may provide both behavioral and physical health services, and individual providers may address 
all of a patient’s behavioral or physical health needs. Depending on its particular characteristics, an 
integrated care setting may not have a Part 2 Program even if it provides some services for the 
diagnosis, treatment, or referral for treatment of a SUD. 


Blue Mountain Physician Group is a group of providers that treats the whole person in an integrated 
care setting. Although Blue Mountain does not advertise that it provides SUD treatment services, its 
physicians have received waivers from SAMHSA to prescribe buprenorphine for the treatment of opioid 
use disorders. 


The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 
is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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Dr. Pierce is a provider at Blue Mountain and treats a diverse group of patients. Occasionally, Dr. Pierce 
encounters patients with an opioid dependency and provides MAT with buprenorphine. However, he 
does this only for a handful of patients and such services do not constitute his primary function at Blue 
Mountain. 


One of his patients, Brooke, came to see him for a respiratory infection. Brooke had previously received 
treatment for an OUD at an inpatient treatment facility not affiliated with Blue Mountain but recently 
relapsed. When Dr. Pierce saw Brooke for the respiratory infection, she mentioned that she was 
experiencing withdrawal symptoms from opioid use. Dr. Pierce prescribed an antibiotic for the infection 
and started MAT with buprenorphine. 


e Step 1-—Is Dr. Pierce covered? Does Part 2 apply? 
Dr. Pierce is federally assisted because he is registered with the DEA to prescribe controlled 
substances for the treatment of OUD and has received a physician waiver from SAMHSA to 
prescribe buprenorphine. 


However, Dr. Pierce practices at a general medical facility where his primary function is not 
providing diagnosis, treatment, or referral for treatment for a SUD. Therefore, Dr. Pierce does 
not meet the definition of a Part 2 Program. 


e Step 2—Can Dr. Pierce disclose patient-identifying information? If so, how? 
In this case, Dr. Pierce is not a Part 2 Program and therefore is not subject to the disclosure 
restrictions of Part 2. However, before he discloses Brooke’s information, Dr. Pierce still needs 
to consider privacy requirements under HIPAA and state privacy laws. 


Additional Resources 


e 42 CFR Part 2 [PDF - 556 KB] 
e SAMHSA’s webpage about 42 CFR Part 2 


The information in this fact sheet is not intended to serve as legal advice nor should it substitute for legal counsel. The fact sheet 
is not exhaustive, and readers are encouraged to seek additional technical guidance to supplement the illustrative information 
contained herein. 
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